drivers/net/wireless/mwifiex/cmdevt.c

   1 /*
   2  * Marvell Wireless LAN device driver: commands and events
   3  *
   4  * Copyright (C) 2011, Marvell International Ltd.
   5  *
   6  * This software file (the "File") is distributed by Marvell International
   7  * Ltd. under the terms of the GNU General Public License Version 2, June 1991
   8  * (the "License").  You may use, redistribute and/or modify this File in
   9  * accordance with the terms and conditions of the License, a copy of which
  10  * is available by writing to the Free Software Foundation, Inc.,
  11  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
  12  * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
  13  *
  14  * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
  15  * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
  16  * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
  17  * this warranty disclaimer.
  18  */
  19
  20 #include "decl.h"
  21 #include "ioctl.h"
  22 #include "util.h"
  23 #include "fw.h"
  24 #include "main.h"
  25 #include "wmm.h"
  26 #include "11n.h"
  27
  28 /*
  29  * This function initializes a command node.
  30  *
  31  * The actual allocation of the node is not done by this function. It only
  32  * initiates a node by filling it with default parameters. Similarly,
  33  * allocation of the different buffers used (IOCTL buffer, data buffer) are
  34  * not done by this function either.
  35  */
  36 static void
  37 mwifiex_init_cmd_node(struct mwifiex_private *priv,
  38                       struct cmd_ctrl_node *cmd_node,
  39                       u32 cmd_oid, void *data_buf)
  40 {
  41         cmd_node->priv = priv;
  42         cmd_node->cmd_oid = cmd_oid;
  43         if (priv->adapter->cmd_wait_q_required) {
  44                 cmd_node->wait_q_enabled = priv->adapter->cmd_wait_q_required;
  45                 priv->adapter->cmd_wait_q_required = false;
  46                 cmd_node->cmd_wait_q_woken = false;
  47                 cmd_node->condition = &cmd_node->cmd_wait_q_woken;
  48         }
  49         cmd_node->data_buf = data_buf;
  50         cmd_node->cmd_skb = cmd_node->skb;
  51 }
  52
  53 /*
  54  * This function returns a command node from the free queue depending upon
  55  * availability.
  56  */
  57 static struct cmd_ctrl_node *
  58 mwifiex_get_cmd_node(struct mwifiex_adapter *adapter)
  59 {
  60         struct cmd_ctrl_node *cmd_node;
  61         unsigned long flags;
  62
  63         spin_lock_irqsave(&adapter->cmd_free_q_lock, flags);
  64         if (list_empty(&adapter->cmd_free_q)) {
  65                 dev_err(adapter->dev, "GET_CMD_NODE: cmd node not available\n");
  66                 spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
  67                 return NULL;
  68         }
  69         cmd_node = list_first_entry(&adapter->cmd_free_q,
  70                         struct cmd_ctrl_node, list);
  71         list_del(&cmd_node->list);
  72         spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
  73
  74         return cmd_node;
  75 }
  76
  77 /*
  78  * This function cleans up a command node.
  79  *
  80  * The function resets the fields including the buffer pointers.
  81  * This function does not try to free the buffers. They must be
  82  * freed before calling this function.
  83  *
  84  * This function will however call the receive completion callback
  85  * in case a response buffer is still available before resetting
  86  * the pointer.
  87  */
  88 static void
  89 mwifiex_clean_cmd_node(struct mwifiex_adapter *adapter,
  90                        struct cmd_ctrl_node *cmd_node)
  91 {
  92         cmd_node->cmd_oid = 0;
  93         cmd_node->cmd_flag = 0;
  94         cmd_node->data_buf = NULL;
  95         cmd_node->wait_q_enabled = false;
  96
  97         if (cmd_node->cmd_skb)
  98                 skb_trim(cmd_node->cmd_skb, 0);
  99
 100         if (cmd_node->resp_skb) {
 101                 adapter->if_ops.cmdrsp_complete(adapter, cmd_node->resp_skb);
 102                 cmd_node->resp_skb = NULL;
 103         }
 104 }
 105
 106 /*
 107  * This function sends a host command to the firmware.
 108  *
 109  * The function copies the host command into the driver command
 110  * buffer, which will be transferred to the firmware later by the
 111  * main thread.
 112  */
 113 static int mwifiex_cmd_host_cmd(struct mwifiex_private *priv,
 114                                 struct host_cmd_ds_command *cmd,
 115                                 struct mwifiex_ds_misc_cmd *pcmd_ptr)
 116 {
 117         /* Copy the HOST command to command buffer */
 118         memcpy(cmd, pcmd_ptr->cmd, pcmd_ptr->len);
 119         dev_dbg(priv->adapter->dev, "cmd: host cmd size = %d\n", pcmd_ptr->len);
 120         return 0;
 121 }
 122
 123 /*
 124  * This function downloads a command to the firmware.
 125  *
 126  * The function performs sanity tests, sets the command sequence
 127  * number and size, converts the header fields to CPU format before
 128  * sending. Afterwards, it logs the command ID and action for debugging
 129  * and sets up the command timeout timer.
 130  */
 131 static int mwifiex_dnld_cmd_to_fw(struct mwifiex_private *priv,
 132                                   struct cmd_ctrl_node *cmd_node)
 133 {
 134
 135         struct mwifiex_adapter *adapter = priv->adapter;
 136         int ret;
 137         struct host_cmd_ds_command *host_cmd;
 138         uint16_t cmd_code;
 139         uint16_t cmd_size;
 140         struct timeval tstamp;
 141         unsigned long flags;
 142
 143         if (!adapter || !cmd_node)
 144                 return -1;
 145
 146         host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
 147
 148         /* Sanity test */
 149         if (host_cmd == NULL || host_cmd->size == 0) {
 150                 dev_err(adapter->dev, "DNLD_CMD: host_cmd is null"
 151                         " or cmd size is 0, not sending\n");
 152                 if (cmd_node->wait_q_enabled)
 153                         adapter->cmd_wait_q.status = -1;
 154                 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
 155                 return -1;
 156         }
 157
 158         /* Set command sequence number */
 159         adapter->seq_num++;
 160         host_cmd->seq_num = cpu_to_le16(HostCmd_SET_SEQ_NO_BSS_INFO
 161                             (adapter->seq_num, cmd_node->priv->bss_num,
 162                              cmd_node->priv->bss_type));
 163
 164         spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 165         adapter->curr_cmd = cmd_node;
 166         spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 167
 168         cmd_code = le16_to_cpu(host_cmd->command);
 169         cmd_size = le16_to_cpu(host_cmd->size);
 170
 171         skb_trim(cmd_node->cmd_skb, cmd_size);
 172
 173         do_gettimeofday(&tstamp);
 174         dev_dbg(adapter->dev, "cmd: DNLD_CMD: (%lu.%lu): %#x, act %#x, len %d,"
 175                 " seqno %#x\n",
 176                 tstamp.tv_sec, tstamp.tv_usec, cmd_code,
 177                le16_to_cpu(*(__le16 *) ((u8 *) host_cmd + S_DS_GEN)), cmd_size,
 178                le16_to_cpu(host_cmd->seq_num));
 179
 180         skb_push(cmd_node->cmd_skb, INTF_HEADER_LEN);
 181
 182         ret = adapter->if_ops.host_to_card(adapter, MWIFIEX_TYPE_CMD,
 183                                            cmd_node->cmd_skb, NULL);
 184
 185         skb_pull(cmd_node->cmd_skb, INTF_HEADER_LEN);
 186
 187         if (ret == -1) {
 188                 dev_err(adapter->dev, "DNLD_CMD: host to card failed\n");
 189                 if (cmd_node->wait_q_enabled)
 190                         adapter->cmd_wait_q.status = -1;
 191                 mwifiex_insert_cmd_to_free_q(adapter, adapter->curr_cmd);
 192
 193                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 194                 adapter->curr_cmd = NULL;
 195                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 196
 197                 adapter->dbg.num_cmd_host_to_card_failure++;
 198                 return -1;
 199         }
 200
 201         /* Save the last command id and action to debug log */
 202         adapter->dbg.last_cmd_index =
 203                 (adapter->dbg.last_cmd_index + 1) % DBG_CMD_NUM;
 204         adapter->dbg.last_cmd_id[adapter->dbg.last_cmd_index] = cmd_code;
 205         adapter->dbg.last_cmd_act[adapter->dbg.last_cmd_index] =
 206                 le16_to_cpu(*(__le16 *) ((u8 *) host_cmd + S_DS_GEN));
 207
 208         /* Clear BSS_NO_BITS from HostCmd */
 209         cmd_code &= HostCmd_CMD_ID_MASK;
 210
 211         /* Setup the timer after transmit command */
 212         mod_timer(&adapter->cmd_timer,
 213                 jiffies + (MWIFIEX_TIMER_10S * HZ) / 1000);
 214
 215         return 0;
 216 }
 217
 218 /*
 219  * This function downloads a sleep confirm command to the firmware.
 220  *
 221  * The function performs sanity tests, sets the command sequence
 222  * number and size, converts the header fields to CPU format before
 223  * sending.
 224  *
 225  * No responses are needed for sleep confirm command.
 226  */
 227 static int mwifiex_dnld_sleep_confirm_cmd(struct mwifiex_adapter *adapter)
 228 {
 229         int ret;
 230         struct mwifiex_private *priv;
 231         struct mwifiex_opt_sleep_confirm *sleep_cfm_buf =
 232                                 (struct mwifiex_opt_sleep_confirm *)
 233                                 adapter->sleep_cfm->data;
 234         priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 235
 236         sleep_cfm_buf->seq_num =
 237                 cpu_to_le16((HostCmd_SET_SEQ_NO_BSS_INFO
 238                                         (adapter->seq_num, priv->bss_num,
 239                                          priv->bss_type)));
 240         adapter->seq_num++;
 241
 242         skb_push(adapter->sleep_cfm, INTF_HEADER_LEN);
 243         ret = adapter->if_ops.host_to_card(adapter, MWIFIEX_TYPE_CMD,
 244                                            adapter->sleep_cfm, NULL);
 245         skb_pull(adapter->sleep_cfm, INTF_HEADER_LEN);
 246
 247         if (ret == -1) {
 248                 dev_err(adapter->dev, "SLEEP_CFM: failed\n");
 249                 adapter->dbg.num_cmd_sleep_cfm_host_to_card_failure++;
 250                 return -1;
 251         }
 252         if (GET_BSS_ROLE(mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY))
 253                         == MWIFIEX_BSS_ROLE_STA) {
 254                 if (!sleep_cfm_buf->resp_ctrl)
 255                         /* Response is not needed for sleep
 256                            confirm command */
 257                         adapter->ps_state = PS_STATE_SLEEP;
 258                 else
 259                         adapter->ps_state = PS_STATE_SLEEP_CFM;
 260
 261                 if (!sleep_cfm_buf->resp_ctrl
 262                                 && (adapter->is_hs_configured
 263                                         && !adapter->sleep_period.period)) {
 264                         adapter->pm_wakeup_card_req = true;
 265                         mwifiex_hs_activated_event(mwifiex_get_priv(adapter,
 266                                                 MWIFIEX_BSS_ROLE_STA), true);
 267                 }
 268         }
 269
 270         return ret;
 271 }
 272
 273 /*
 274  * This function allocates the command buffers and links them to
 275  * the command free queue.
 276  *
 277  * The driver uses a pre allocated number of command buffers, which
 278  * are created at driver initializations and freed at driver cleanup.
 279  * Every command needs to obtain a command buffer from this pool before
 280  * it can be issued. The command free queue lists the command buffers
 281  * currently free to use, while the command pending queue lists the
 282  * command buffers already in use and awaiting handling. Command buffers
 283  * are returned to the free queue after use.
 284  */
 285 int mwifiex_alloc_cmd_buffer(struct mwifiex_adapter *adapter)
 286 {
 287         struct cmd_ctrl_node *cmd_array;
 288         u32 buf_size;
 289         u32 i;
 290
 291         /* Allocate and initialize struct cmd_ctrl_node */
 292         buf_size = sizeof(struct cmd_ctrl_node) * MWIFIEX_NUM_OF_CMD_BUFFER;
 293         cmd_array = kzalloc(buf_size, GFP_KERNEL);
 294         if (!cmd_array) {
 295                 dev_err(adapter->dev, "%s: failed to alloc cmd_array\n",
 296                                 __func__);
 297                 return -ENOMEM;
 298         }
 299
 300         adapter->cmd_pool = cmd_array;
 301         memset(adapter->cmd_pool, 0, buf_size);
 302
 303         /* Allocate and initialize command buffers */
 304         for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++) {
 305                 cmd_array[i].skb = dev_alloc_skb(MWIFIEX_SIZE_OF_CMD_BUFFER);
 306                 if (!cmd_array[i].skb) {
 307                         dev_err(adapter->dev, "ALLOC_CMD_BUF: out of memory\n");
 308                         return -1;
 309                 }
 310         }
 311
 312         for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++)
 313                 mwifiex_insert_cmd_to_free_q(adapter, &cmd_array[i]);
 314
 315         return 0;
 316 }
 317
 318 /*
 319  * This function frees the command buffers.
 320  *
 321  * The function calls the completion callback for all the command
 322  * buffers that still have response buffers associated with them.
 323  */
 324 int mwifiex_free_cmd_buffer(struct mwifiex_adapter *adapter)
 325 {
 326         struct cmd_ctrl_node *cmd_array;
 327         u32 i;
 328
 329         /* Need to check if cmd pool is allocated or not */
 330         if (!adapter->cmd_pool) {
 331                 dev_dbg(adapter->dev, "info: FREE_CMD_BUF: cmd_pool is null\n");
 332                 return 0;
 333         }
 334
 335         cmd_array = adapter->cmd_pool;
 336
 337         /* Release shared memory buffers */
 338         for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++) {
 339                 if (cmd_array[i].skb) {
 340                         dev_dbg(adapter->dev, "cmd: free cmd buffer %d\n", i);
 341                         dev_kfree_skb_any(cmd_array[i].skb);
 342                 }
 343                 if (!cmd_array[i].resp_skb)
 344                         continue;
 345                 dev_kfree_skb_any(cmd_array[i].resp_skb);
 346         }
 347         /* Release struct cmd_ctrl_node */
 348         if (adapter->cmd_pool) {
 349                 dev_dbg(adapter->dev, "cmd: free cmd pool\n");
 350                 kfree(adapter->cmd_pool);
 351                 adapter->cmd_pool = NULL;
 352         }
 353
 354         return 0;
 355 }
 356
 357 /*
 358  * This function handles events generated by firmware.
 359  *
 360  * Event body of events received from firmware are not used (though they are
 361  * saved), only the event ID is used. Some events are re-invoked by
 362  * the driver, with a new event body.
 363  *
 364  * After processing, the function calls the completion callback
 365  * for cleanup.
 366  */
 367 int mwifiex_process_event(struct mwifiex_adapter *adapter)
 368 {
 369         int ret;
 370         struct mwifiex_private *priv =
 371                 mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 372         struct sk_buff *skb = adapter->event_skb;
 373         u32 eventcause = adapter->event_cause;
 374         struct timeval tstamp;
 375         struct mwifiex_rxinfo *rx_info;
 376
 377         /* Save the last event to debug log */
 378         adapter->dbg.last_event_index =
 379                 (adapter->dbg.last_event_index + 1) % DBG_CMD_NUM;
 380         adapter->dbg.last_event[adapter->dbg.last_event_index] =
 381                 (u16) eventcause;
 382
 383         /* Get BSS number and corresponding priv */
 384         priv = mwifiex_get_priv_by_id(adapter, EVENT_GET_BSS_NUM(eventcause),
 385                                       EVENT_GET_BSS_TYPE(eventcause));
 386         if (!priv)
 387                 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 388         /* Clear BSS_NO_BITS from event */
 389         eventcause &= EVENT_ID_MASK;
 390         adapter->event_cause = eventcause;
 391
 392         if (skb) {
 393                 rx_info = MWIFIEX_SKB_RXCB(skb);
 394                 rx_info->bss_index = priv->bss_index;
 395         }
 396
 397         if (eventcause != EVENT_PS_SLEEP && eventcause != EVENT_PS_AWAKE) {
 398                 do_gettimeofday(&tstamp);
 399                 dev_dbg(adapter->dev, "event: %lu.%lu: cause: %#x\n",
 400                        tstamp.tv_sec, tstamp.tv_usec, eventcause);
 401         }
 402
 403         ret = mwifiex_process_sta_event(priv);
 404
 405         adapter->event_cause = 0;
 406         adapter->event_skb = NULL;
 407         adapter->if_ops.event_complete(adapter, skb);
 408
 409         return ret;
 410 }
 411
 412 /*
 413  * This function is used to send synchronous command to the firmware.
 414  *
 415  * it allocates a wait queue for the command and wait for the command
 416  * response.
 417  */
 418 int mwifiex_send_cmd_sync(struct mwifiex_private *priv, uint16_t cmd_no,
 419                           u16 cmd_action, u32 cmd_oid, void *data_buf)
 420 {
 421         int ret = 0;
 422         struct mwifiex_adapter *adapter = priv->adapter;
 423
 424         adapter->cmd_wait_q_required = true;
 425
 426         ret = mwifiex_send_cmd_async(priv, cmd_no, cmd_action, cmd_oid,
 427                                      data_buf);
 428         if (!ret)
 429                 ret = mwifiex_wait_queue_complete(adapter);
 430
 431         return ret;
 432 }
 433
 434
 435 /*
 436  * This function prepares a command and asynchronously send it to the firmware.
 437  *
 438  * Preparation includes -
 439  *      - Sanity tests to make sure the card is still present or the FW
 440  *        is not reset
 441  *      - Getting a new command node from the command free queue
 442  *      - Initializing the command node for default parameters
 443  *      - Fill up the non-default parameters and buffer pointers
 444  *      - Add the command to pending queue
 445  */
 446 int mwifiex_send_cmd_async(struct mwifiex_private *priv, uint16_t cmd_no,
 447                            u16 cmd_action, u32 cmd_oid, void *data_buf)
 448 {
 449         int ret;
 450         struct mwifiex_adapter *adapter = priv->adapter;
 451         struct cmd_ctrl_node *cmd_node;
 452         struct host_cmd_ds_command *cmd_ptr;
 453
 454         if (!adapter) {
 455                 pr_err("PREP_CMD: adapter is NULL\n");
 456                 return -1;
 457         }
 458
 459         if (adapter->is_suspended) {
 460                 dev_err(adapter->dev, "PREP_CMD: device in suspended state\n");
 461                 return -1;
 462         }
 463
 464         if (adapter->surprise_removed) {
 465                 dev_err(adapter->dev, "PREP_CMD: card is removed\n");
 466                 return -1;
 467         }
 468
 469         if (adapter->hw_status == MWIFIEX_HW_STATUS_RESET) {
 470                 if (cmd_no != HostCmd_CMD_FUNC_INIT) {
 471                         dev_err(adapter->dev, "PREP_CMD: FW in reset state\n");
 472                         return -1;
 473                 }
 474         }
 475
 476         /* Get a new command node */
 477         cmd_node = mwifiex_get_cmd_node(adapter);
 478
 479         if (!cmd_node) {
 480                 dev_err(adapter->dev, "PREP_CMD: no free cmd node\n");
 481                 return -1;
 482         }
 483
 484         /* Initialize the command node */
 485         mwifiex_init_cmd_node(priv, cmd_node, cmd_oid, data_buf);
 486
 487         if (!cmd_node->cmd_skb) {
 488                 dev_err(adapter->dev, "PREP_CMD: no free cmd buf\n");
 489                 return -1;
 490         }
 491
 492         memset(skb_put(cmd_node->cmd_skb, sizeof(struct host_cmd_ds_command)),
 493                0, sizeof(struct host_cmd_ds_command));
 494
 495         cmd_ptr = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
 496         cmd_ptr->command = cpu_to_le16(cmd_no);
 497         cmd_ptr->result = 0;
 498
 499         /* Prepare command */
 500         if (cmd_no) {
 501                 ret = mwifiex_sta_prepare_cmd(priv, cmd_no, cmd_action,
 502                                               cmd_oid, data_buf, cmd_ptr);
 503         } else {
 504                 ret = mwifiex_cmd_host_cmd(priv, cmd_ptr, data_buf);
 505                 cmd_node->cmd_flag |= CMD_F_HOSTCMD;
 506         }
 507
 508         /* Return error, since the command preparation failed */
 509         if (ret) {
 510                 dev_err(adapter->dev, "PREP_CMD: cmd %#x preparation failed\n",
 511                                                         cmd_no);
 512                 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
 513                 return -1;
 514         }
 515
 516         /* Send command */
 517         if (cmd_no == HostCmd_CMD_802_11_SCAN) {
 518                 mwifiex_queue_scan_cmd(priv, cmd_node);
 519         } else {
 520                 adapter->cmd_queued = cmd_node;
 521                 mwifiex_insert_cmd_to_pending_q(adapter, cmd_node, true);
 522         }
 523
 524         return ret;
 525 }
 526
 527 /*
 528  * This function returns a command to the command free queue.
 529  *
 530  * The function also calls the completion callback if required, before
 531  * cleaning the command node and re-inserting it into the free queue.
 532  */
 533 void
 534 mwifiex_insert_cmd_to_free_q(struct mwifiex_adapter *adapter,
 535                              struct cmd_ctrl_node *cmd_node)
 536 {
 537         unsigned long flags;
 538
 539         if (!cmd_node)
 540                 return;
 541
 542         if (cmd_node->wait_q_enabled)
 543                 mwifiex_complete_cmd(adapter, cmd_node);
 544         /* Clean the node */
 545         mwifiex_clean_cmd_node(adapter, cmd_node);
 546
 547         /* Insert node into cmd_free_q */
 548         spin_lock_irqsave(&adapter->cmd_free_q_lock, flags);
 549         list_add_tail(&cmd_node->list, &adapter->cmd_free_q);
 550         spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
 551 }
 552
 553 /*
 554  * This function queues a command to the command pending queue.
 555  *
 556  * This in effect adds the command to the command list to be executed.
 557  * Exit PS command is handled specially, by placing it always to the
 558  * front of the command queue.
 559  */
 560 void
 561 mwifiex_insert_cmd_to_pending_q(struct mwifiex_adapter *adapter,
 562                                 struct cmd_ctrl_node *cmd_node, u32 add_tail)
 563 {
 564         struct host_cmd_ds_command *host_cmd = NULL;
 565         u16 command;
 566         unsigned long flags;
 567
 568         host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
 569         if (!host_cmd) {
 570                 dev_err(adapter->dev, "QUEUE_CMD: host_cmd is NULL\n");
 571                 return;
 572         }
 573
 574         command = le16_to_cpu(host_cmd->command);
 575
 576         /* Exit_PS command needs to be queued in the header always. */
 577         if (command == HostCmd_CMD_802_11_PS_MODE_ENH) {
 578                 struct host_cmd_ds_802_11_ps_mode_enh *pm =
 579                         &host_cmd->params.psmode_enh;
 580                 if ((le16_to_cpu(pm->action) == DIS_PS)
 581                     || (le16_to_cpu(pm->action) == DIS_AUTO_PS)) {
 582                         if (adapter->ps_state != PS_STATE_AWAKE)
 583                                 add_tail = false;
 584                 }
 585         }
 586
 587         spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
 588         if (add_tail)
 589                 list_add_tail(&cmd_node->list, &adapter->cmd_pending_q);
 590         else
 591                 list_add(&cmd_node->list, &adapter->cmd_pending_q);
 592         spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
 593
 594         dev_dbg(adapter->dev, "cmd: QUEUE_CMD: cmd=%#x is queued\n", command);
 595 }
 596
 597 /*
 598  * This function executes the next command in command pending queue.
 599  *
 600  * This function will fail if a command is already in processing stage,
 601  * otherwise it will dequeue the first command from the command pending
 602  * queue and send to the firmware.
 603  *
 604  * If the device is currently in host sleep mode, any commands, except the
 605  * host sleep configuration command will de-activate the host sleep. For PS
 606  * mode, the function will put the firmware back to sleep if applicable.
 607  */
 608 int mwifiex_exec_next_cmd(struct mwifiex_adapter *adapter)
 609 {
 610         struct mwifiex_private *priv;
 611         struct cmd_ctrl_node *cmd_node;
 612         int ret = 0;
 613         struct host_cmd_ds_command *host_cmd;
 614         unsigned long cmd_flags;
 615         unsigned long cmd_pending_q_flags;
 616
 617         /* Check if already in processing */
 618         if (adapter->curr_cmd) {
 619                 dev_err(adapter->dev, "EXEC_NEXT_CMD: cmd in processing\n");
 620                 return -1;
 621         }
 622
 623         spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
 624         /* Check if any command is pending */
 625         spin_lock_irqsave(&adapter->cmd_pending_q_lock, cmd_pending_q_flags);
 626         if (list_empty(&adapter->cmd_pending_q)) {
 627                 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
 628                                        cmd_pending_q_flags);
 629                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
 630                 return 0;
 631         }
 632         cmd_node = list_first_entry(&adapter->cmd_pending_q,
 633                                     struct cmd_ctrl_node, list);
 634         spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
 635                                cmd_pending_q_flags);
 636
 637         host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
 638         priv = cmd_node->priv;
 639
 640         if (adapter->ps_state != PS_STATE_AWAKE) {
 641                 dev_err(adapter->dev, "%s: cannot send cmd in sleep state,"
 642                                 " this should not happen\n", __func__);
 643                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
 644                 return ret;
 645         }
 646
 647         spin_lock_irqsave(&adapter->cmd_pending_q_lock, cmd_pending_q_flags);
 648         list_del(&cmd_node->list);
 649         spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
 650                                cmd_pending_q_flags);
 651
 652         spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
 653         ret = mwifiex_dnld_cmd_to_fw(priv, cmd_node);
 654         priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 655         /* Any command sent to the firmware when host is in sleep
 656          * mode should de-configure host sleep. We should skip the
 657          * host sleep configuration command itself though
 658          */
 659         if (priv && (host_cmd->command !=
 660              cpu_to_le16(HostCmd_CMD_802_11_HS_CFG_ENH))) {
 661                 if (adapter->hs_activated) {
 662                         adapter->is_hs_configured = false;
 663                         mwifiex_hs_activated_event(priv, false);
 664                 }
 665         }
 666
 667         return ret;
 668 }
 669
 670 /*
 671  * This function handles the command response.
 672  *
 673  * After processing, the function cleans the command node and puts
 674  * it back to the command free queue.
 675  */
 676 int mwifiex_process_cmdresp(struct mwifiex_adapter *adapter)
 677 {
 678         struct host_cmd_ds_command *resp;
 679         struct mwifiex_private *priv =
 680                 mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 681         int ret = 0;
 682         uint16_t orig_cmdresp_no;
 683         uint16_t cmdresp_no;
 684         uint16_t cmdresp_result;
 685         struct timeval tstamp;
 686         unsigned long flags;
 687
 688         /* Now we got response from FW, cancel the command timer */
 689         del_timer(&adapter->cmd_timer);
 690
 691         if (!adapter->curr_cmd || !adapter->curr_cmd->resp_skb) {
 692                 resp = (struct host_cmd_ds_command *) adapter->upld_buf;
 693                 dev_err(adapter->dev, "CMD_RESP: NULL curr_cmd, %#x\n",
 694                        le16_to_cpu(resp->command));
 695                 return -1;
 696         }
 697
 698         adapter->num_cmd_timeout = 0;
 699
 700         resp = (struct host_cmd_ds_command *) adapter->curr_cmd->resp_skb->data;
 701         if (adapter->curr_cmd->cmd_flag & CMD_F_CANCELED) {
 702                 dev_err(adapter->dev, "CMD_RESP: %#x been canceled\n",
 703                                 le16_to_cpu(resp->command));
 704                 mwifiex_insert_cmd_to_free_q(adapter, adapter->curr_cmd);
 705                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 706                 adapter->curr_cmd = NULL;
 707                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 708                 return -1;
 709         }
 710
 711         if (adapter->curr_cmd->cmd_flag & CMD_F_HOSTCMD) {
 712                 /* Copy original response back to response buffer */
 713                 struct mwifiex_ds_misc_cmd *hostcmd;
 714                 uint16_t size = le16_to_cpu(resp->size);
 715                 dev_dbg(adapter->dev, "info: host cmd resp size = %d\n", size);
 716                 size = min_t(u16, size, MWIFIEX_SIZE_OF_CMD_BUFFER);
 717                 if (adapter->curr_cmd->data_buf) {
 718                         hostcmd = adapter->curr_cmd->data_buf;
 719                         hostcmd->len = size;
 720                         memcpy(hostcmd->cmd, resp, size);
 721                 }
 722         }
 723         orig_cmdresp_no = le16_to_cpu(resp->command);
 724
 725         /* Get BSS number and corresponding priv */
 726         priv = mwifiex_get_priv_by_id(adapter,
 727                         HostCmd_GET_BSS_NO(le16_to_cpu(resp->seq_num)),
 728                         HostCmd_GET_BSS_TYPE(le16_to_cpu(resp->seq_num)));
 729         if (!priv)
 730                 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 731         /* Clear RET_BIT from HostCmd */
 732         resp->command = cpu_to_le16(orig_cmdresp_no & HostCmd_CMD_ID_MASK);
 733
 734         cmdresp_no = le16_to_cpu(resp->command);
 735         cmdresp_result = le16_to_cpu(resp->result);
 736
 737         /* Save the last command response to debug log */
 738         adapter->dbg.last_cmd_resp_index =
 739                 (adapter->dbg.last_cmd_resp_index + 1) % DBG_CMD_NUM;
 740         adapter->dbg.last_cmd_resp_id[adapter->dbg.last_cmd_resp_index] =
 741                 orig_cmdresp_no;
 742
 743         do_gettimeofday(&tstamp);
 744         dev_dbg(adapter->dev, "cmd: CMD_RESP: (%lu.%lu): 0x%x, result %d,"
 745                 " len %d, seqno 0x%x\n",
 746                tstamp.tv_sec, tstamp.tv_usec, orig_cmdresp_no, cmdresp_result,
 747                le16_to_cpu(resp->size), le16_to_cpu(resp->seq_num));
 748
 749         if (!(orig_cmdresp_no & HostCmd_RET_BIT)) {
 750                 dev_err(adapter->dev, "CMD_RESP: invalid cmd resp\n");
 751                 if (adapter->curr_cmd->wait_q_enabled)
 752                         adapter->cmd_wait_q.status = -1;
 753
 754                 mwifiex_insert_cmd_to_free_q(adapter, adapter->curr_cmd);
 755                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 756                 adapter->curr_cmd = NULL;
 757                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 758                 return -1;
 759         }
 760
 761         if (adapter->curr_cmd->cmd_flag & CMD_F_HOSTCMD) {
 762                 adapter->curr_cmd->cmd_flag &= ~CMD_F_HOSTCMD;
 763                 if ((cmdresp_result == HostCmd_RESULT_OK)
 764                     && (cmdresp_no == HostCmd_CMD_802_11_HS_CFG_ENH))
 765                         ret = mwifiex_ret_802_11_hs_cfg(priv, resp);
 766         } else {
 767                 /* handle response */
 768                 ret = mwifiex_process_sta_cmdresp(priv, cmdresp_no, resp);
 769         }
 770
 771         /* Check init command response */
 772         if (adapter->hw_status == MWIFIEX_HW_STATUS_INITIALIZING) {
 773                 if (ret == -1) {
 774                         dev_err(adapter->dev, "%s: cmd %#x failed during "
 775                                 "initialization\n", __func__, cmdresp_no);
 776                         mwifiex_init_fw_complete(adapter);
 777                         return -1;
 778                 } else if (adapter->last_init_cmd == cmdresp_no)
 779                         adapter->hw_status = MWIFIEX_HW_STATUS_INIT_DONE;
 780         }
 781
 782         if (adapter->curr_cmd) {
 783                 if (adapter->curr_cmd->wait_q_enabled && (!ret))
 784                         adapter->cmd_wait_q.status = 0;
 785                 else if (adapter->curr_cmd->wait_q_enabled && (ret == -1))
 786                         adapter->cmd_wait_q.status = -1;
 787
 788                 /* Clean up and put current command back to cmd_free_q */
 789                 mwifiex_insert_cmd_to_free_q(adapter, adapter->curr_cmd);
 790
 791                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 792                 adapter->curr_cmd = NULL;
 793                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 794         }
 795
 796         return ret;
 797 }
 798
 799 /*
 800  * This function handles the timeout of command sending.
 801  *
 802  * It will re-send the same command again.
 803  */
 804 void
 805 mwifiex_cmd_timeout_func(unsigned long function_context)
 806 {
 807         struct mwifiex_adapter *adapter =
 808                 (struct mwifiex_adapter *) function_context;
 809         struct cmd_ctrl_node *cmd_node;
 810         struct timeval tstamp;
 811
 812         adapter->num_cmd_timeout++;
 813         adapter->dbg.num_cmd_timeout++;
 814         if (!adapter->curr_cmd) {
 815                 dev_dbg(adapter->dev, "cmd: empty curr_cmd\n");
 816                 return;
 817         }
 818         cmd_node = adapter->curr_cmd;
 819         if (cmd_node->wait_q_enabled)
 820                 adapter->cmd_wait_q.status = -ETIMEDOUT;
 821
 822         if (cmd_node) {
 823                 adapter->dbg.timeout_cmd_id =
 824                         adapter->dbg.last_cmd_id[adapter->dbg.last_cmd_index];
 825                 adapter->dbg.timeout_cmd_act =
 826                         adapter->dbg.last_cmd_act[adapter->dbg.last_cmd_index];
 827                 do_gettimeofday(&tstamp);
 828                 dev_err(adapter->dev, "%s: Timeout cmd id (%lu.%lu) = %#x,"
 829                         " act = %#x\n", __func__,
 830                        tstamp.tv_sec, tstamp.tv_usec,
 831                        adapter->dbg.timeout_cmd_id,
 832                        adapter->dbg.timeout_cmd_act);
 833
 834                 dev_err(adapter->dev, "num_data_h2c_failure = %d\n",
 835                        adapter->dbg.num_tx_host_to_card_failure);
 836                 dev_err(adapter->dev, "num_cmd_h2c_failure = %d\n",
 837                        adapter->dbg.num_cmd_host_to_card_failure);
 838
 839                 dev_err(adapter->dev, "num_cmd_timeout = %d\n",
 840                        adapter->dbg.num_cmd_timeout);
 841                 dev_err(adapter->dev, "num_tx_timeout = %d\n",
 842                        adapter->dbg.num_tx_timeout);
 843
 844                 dev_err(adapter->dev, "last_cmd_index = %d\n",
 845                        adapter->dbg.last_cmd_index);
 846                 print_hex_dump_bytes("last_cmd_id: ", DUMP_PREFIX_OFFSET,
 847                                 adapter->dbg.last_cmd_id, DBG_CMD_NUM);
 848                 print_hex_dump_bytes("last_cmd_act: ", DUMP_PREFIX_OFFSET,
 849                                 adapter->dbg.last_cmd_act, DBG_CMD_NUM);
 850
 851                 dev_err(adapter->dev, "last_cmd_resp_index = %d\n",
 852                        adapter->dbg.last_cmd_resp_index);
 853                 print_hex_dump_bytes("last_cmd_resp_id: ", DUMP_PREFIX_OFFSET,
 854                                 adapter->dbg.last_cmd_resp_id, DBG_CMD_NUM);
 855
 856                 dev_err(adapter->dev, "last_event_index = %d\n",
 857                        adapter->dbg.last_event_index);
 858                 print_hex_dump_bytes("last_event: ", DUMP_PREFIX_OFFSET,
 859                                 adapter->dbg.last_event, DBG_CMD_NUM);
 860
 861                 dev_err(adapter->dev, "data_sent=%d cmd_sent=%d\n",
 862                        adapter->data_sent, adapter->cmd_sent);
 863
 864                 dev_err(adapter->dev, "ps_mode=%d ps_state=%d\n",
 865                                 adapter->ps_mode, adapter->ps_state);
 866         }
 867         if (adapter->hw_status == MWIFIEX_HW_STATUS_INITIALIZING)
 868                 mwifiex_init_fw_complete(adapter);
 869 }
 870
 871 /*
 872  * This function cancels all the pending commands.
 873  *
 874  * The current command, all commands in command pending queue and all scan
 875  * commands in scan pending queue are cancelled. All the completion callbacks
 876  * are called with failure status to ensure cleanup.
 877  */
 878 void
 879 mwifiex_cancel_all_pending_cmd(struct mwifiex_adapter *adapter)
 880 {
 881         struct cmd_ctrl_node *cmd_node = NULL, *tmp_node;
 882         unsigned long flags;
 883
 884         /* Cancel current cmd */
 885         if ((adapter->curr_cmd) && (adapter->curr_cmd->wait_q_enabled)) {
 886                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 887                 adapter->curr_cmd->wait_q_enabled = false;
 888                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 889                 adapter->cmd_wait_q.status = -1;
 890                 mwifiex_complete_cmd(adapter, adapter->curr_cmd);
 891         }
 892         /* Cancel all pending command */
 893         spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
 894         list_for_each_entry_safe(cmd_node, tmp_node,
 895                                  &adapter->cmd_pending_q, list) {
 896                 list_del(&cmd_node->list);
 897                 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
 898
 899                 if (cmd_node->wait_q_enabled) {
 900                         adapter->cmd_wait_q.status = -1;
 901                         mwifiex_complete_cmd(adapter, cmd_node);
 902                         cmd_node->wait_q_enabled = false;
 903                 }
 904                 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
 905                 spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
 906         }
 907         spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
 908
 909         /* Cancel all pending scan command */
 910         spin_lock_irqsave(&adapter->scan_pending_q_lock, flags);
 911         list_for_each_entry_safe(cmd_node, tmp_node,
 912                                  &adapter->scan_pending_q, list) {
 913                 list_del(&cmd_node->list);
 914                 spin_unlock_irqrestore(&adapter->scan_pending_q_lock, flags);
 915
 916                 cmd_node->wait_q_enabled = false;
 917                 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
 918                 spin_lock_irqsave(&adapter->scan_pending_q_lock, flags);
 919         }
 920         spin_unlock_irqrestore(&adapter->scan_pending_q_lock, flags);
 921
 922         spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 923         adapter->scan_processing = false;
 924         spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 925 }
 926
 927 /*
 928  * This function cancels all pending commands that matches with
 929  * the given IOCTL request.
 930  *
 931  * Both the current command buffer and the pending command queue are
 932  * searched for matching IOCTL request. The completion callback of
 933  * the matched command is called with failure status to ensure cleanup.
 934  * In case of scan commands, all pending commands in scan pending queue
 935  * are cancelled.
 936  */
 937 void
 938 mwifiex_cancel_pending_ioctl(struct mwifiex_adapter *adapter)
 939 {
 940         struct cmd_ctrl_node *cmd_node = NULL, *tmp_node = NULL;
 941         unsigned long cmd_flags;
 942         unsigned long scan_pending_q_flags;
 943         uint16_t cancel_scan_cmd = false;
 944
 945         if ((adapter->curr_cmd) &&
 946              (adapter->curr_cmd->wait_q_enabled)) {
 947                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
 948                 cmd_node = adapter->curr_cmd;
 949                 cmd_node->wait_q_enabled = false;
 950                 cmd_node->cmd_flag |= CMD_F_CANCELED;
 951                 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
 952                 mwifiex_complete_cmd(adapter, adapter->curr_cmd);
 953                 adapter->curr_cmd = NULL;
 954                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
 955         }
 956
 957         /* Cancel all pending scan command */
 958         spin_lock_irqsave(&adapter->scan_pending_q_lock,
 959                           scan_pending_q_flags);
 960         list_for_each_entry_safe(cmd_node, tmp_node,
 961                                  &adapter->scan_pending_q, list) {
 962                 list_del(&cmd_node->list);
 963                 spin_unlock_irqrestore(&adapter->scan_pending_q_lock,
 964                                        scan_pending_q_flags);
 965                 cmd_node->wait_q_enabled = false;
 966                 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
 967                 spin_lock_irqsave(&adapter->scan_pending_q_lock,
 968                                   scan_pending_q_flags);
 969                 cancel_scan_cmd = true;
 970         }
 971         spin_unlock_irqrestore(&adapter->scan_pending_q_lock,
 972                                scan_pending_q_flags);
 973
 974         if (cancel_scan_cmd) {
 975                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
 976                 adapter->scan_processing = false;
 977                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
 978         }
 979         adapter->cmd_wait_q.status = -1;
 980 }
 981
 982 /*
 983  * This function sends the sleep confirm command to firmware, if
 984  * possible.
 985  *
 986  * The sleep confirm command cannot be issued if command response,
 987  * data response or event response is awaiting handling, or if we
 988  * are in the middle of sending a command, or expecting a command
 989  * response.
 990  */
 991 void
 992 mwifiex_check_ps_cond(struct mwifiex_adapter *adapter)
 993 {
 994         if (!adapter->cmd_sent &&
 995             !adapter->curr_cmd && !IS_CARD_RX_RCVD(adapter))
 996                 mwifiex_dnld_sleep_confirm_cmd(adapter);
 997         else
 998                 dev_dbg(adapter->dev,
 999                         "cmd: Delay Sleep Confirm (%s%s%s)\n",
1000                        (adapter->cmd_sent) ? "D" : "",
1001                        (adapter->curr_cmd) ? "C" : "",
1002                        (IS_CARD_RX_RCVD(adapter)) ? "R" : "");
1003 }
1004
1005 /*
1006  * This function sends a Host Sleep activated event to applications.
1007  *
1008  * This event is generated by the driver, with a blank event body.
1009  */
1010 void
1011 mwifiex_hs_activated_event(struct mwifiex_private *priv, u8 activated)
1012 {
1013         if (activated) {
1014                 if (priv->adapter->is_hs_configured) {
1015                         priv->adapter->hs_activated = true;
1016                         dev_dbg(priv->adapter->dev, "event: hs_activated\n");
1017                         priv->adapter->hs_activate_wait_q_woken = true;
1018                         wake_up_interruptible(
1019                                 &priv->adapter->hs_activate_wait_q);
1020                 } else {
1021                         dev_dbg(priv->adapter->dev, "event: HS not configured\n");
1022                 }
1023         } else {
1024                 dev_dbg(priv->adapter->dev, "event: hs_deactivated\n");
1025                 priv->adapter->hs_activated = false;
1026         }
1027 }
1028
1029 /*
1030  * This function handles the command response of a Host Sleep configuration
1031  * command.
1032  *
1033  * Handling includes changing the header fields into CPU format
1034  * and setting the current host sleep activation status in driver.
1035  *
1036  * In case host sleep status change, the function generates an event to
1037  * notify the applications.
1038  */
1039 int mwifiex_ret_802_11_hs_cfg(struct mwifiex_private *priv,
1040                               struct host_cmd_ds_command *resp)
1041 {
1042         struct mwifiex_adapter *adapter = priv->adapter;
1043         struct host_cmd_ds_802_11_hs_cfg_enh *phs_cfg =
1044                 &resp->params.opt_hs_cfg;
1045         uint32_t conditions = le32_to_cpu(phs_cfg->params.hs_config.conditions);
1046
1047         if (phs_cfg->action == cpu_to_le16(HS_ACTIVATE)) {
1048                 mwifiex_hs_activated_event(priv, true);
1049                 return 0;
1050         } else {
1051                 dev_dbg(adapter->dev, "cmd: CMD_RESP: HS_CFG cmd reply"
1052                         " result=%#x, conditions=0x%x gpio=0x%x gap=0x%x\n",
1053                         resp->result, conditions,
1054                        phs_cfg->params.hs_config.gpio,
1055                        phs_cfg->params.hs_config.gap);
1056         }
1057         if (conditions != HOST_SLEEP_CFG_CANCEL) {
1058                 adapter->is_hs_configured = true;
1059         } else {
1060                 adapter->is_hs_configured = false;
1061                 if (adapter->hs_activated)
1062                         mwifiex_hs_activated_event(priv, false);
1063         }
1064
1065         return 0;
1066 }
1067
1068 /*
1069  * This function wakes up the adapter and generates a Host Sleep
1070  * cancel event on receiving the power up interrupt.
1071  */
1072 void
1073 mwifiex_process_hs_config(struct mwifiex_adapter *adapter)
1074 {
1075         dev_dbg(adapter->dev, "info: %s: auto cancelling host sleep"
1076                 " since there is interrupt from the firmware\n", __func__);
1077
1078         adapter->if_ops.wakeup(adapter);
1079         adapter->hs_activated = false;
1080         adapter->is_hs_configured = false;
1081         mwifiex_hs_activated_event(mwifiex_get_priv(adapter,
1082                                    MWIFIEX_BSS_ROLE_ANY), false);
1083 }
1084
1085 /*
1086  * This function handles the command response of a sleep confirm command.
1087  *
1088  * The function sets the card state to SLEEP if the response indicates success.
1089  */
1090 void
1091 mwifiex_process_sleep_confirm_resp(struct mwifiex_adapter *adapter,
1092                                    u8 *pbuf, u32 upld_len)
1093 {
1094         struct host_cmd_ds_command *cmd = (struct host_cmd_ds_command *) pbuf;
1095         struct mwifiex_private *priv =
1096                 mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
1097         uint16_t result = le16_to_cpu(cmd->result);
1098         uint16_t command = le16_to_cpu(cmd->command);
1099         uint16_t seq_num = le16_to_cpu(cmd->seq_num);
1100
1101         if (!upld_len) {
1102                 dev_err(adapter->dev, "%s: cmd size is 0\n", __func__);
1103                 return;
1104         }
1105
1106         /* Get BSS number and corresponding priv */
1107         priv = mwifiex_get_priv_by_id(adapter, HostCmd_GET_BSS_NO(seq_num),
1108                                       HostCmd_GET_BSS_TYPE(seq_num));
1109         if (!priv)
1110                 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
1111
1112         /* Update sequence number */
1113         seq_num = HostCmd_GET_SEQ_NO(seq_num);
1114         /* Clear RET_BIT from HostCmd */
1115         command &= HostCmd_CMD_ID_MASK;
1116
1117         if (command != HostCmd_CMD_802_11_PS_MODE_ENH) {
1118                 dev_err(adapter->dev, "%s: received unexpected response for"
1119                         " cmd %x, result = %x\n", __func__, command, result);
1120                 return;
1121         }
1122
1123         if (result) {
1124                 dev_err(adapter->dev, "%s: sleep confirm cmd failed\n",
1125                                                 __func__);
1126                 adapter->pm_wakeup_card_req = false;
1127                 adapter->ps_state = PS_STATE_AWAKE;
1128                 return;
1129         }
1130         adapter->pm_wakeup_card_req = true;
1131         if (adapter->is_hs_configured)
1132                 mwifiex_hs_activated_event(mwifiex_get_priv(adapter,
1133                                            MWIFIEX_BSS_ROLE_ANY), true);
1134         adapter->ps_state = PS_STATE_SLEEP;
1135         cmd->command = cpu_to_le16(command);
1136         cmd->seq_num = cpu_to_le16(seq_num);
1137 }
1138 EXPORT_SYMBOL_GPL(mwifiex_process_sleep_confirm_resp);
1139
1140 /*
1141  * This function prepares an enhanced power mode command.
1142  *
1143  * This function can be used to disable power save or to configure
1144  * power save with auto PS or STA PS or auto deep sleep.
1145  *
1146  * Preparation includes -
1147  *      - Setting command ID, action and proper size
1148  *      - Setting Power Save bitmap, PS parameters TLV, PS mode TLV,
1149  *        auto deep sleep TLV (as required)
1150  *      - Ensuring correct endian-ness
1151  */
1152 int mwifiex_cmd_enh_power_mode(struct mwifiex_private *priv,
1153                                struct host_cmd_ds_command *cmd,
1154                                u16 cmd_action, uint16_t ps_bitmap,
1155                                struct mwifiex_ds_auto_ds *auto_ds)
1156 {
1157         struct host_cmd_ds_802_11_ps_mode_enh *psmode_enh =
1158                 &cmd->params.psmode_enh;
1159         u8 *tlv;
1160         u16 cmd_size = 0;
1161
1162         cmd->command = cpu_to_le16(HostCmd_CMD_802_11_PS_MODE_ENH);
1163         if (cmd_action == DIS_AUTO_PS) {
1164                 psmode_enh->action = cpu_to_le16(DIS_AUTO_PS);
1165                 psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1166                 cmd->size = cpu_to_le16(S_DS_GEN + sizeof(psmode_enh->action) +
1167                                 sizeof(psmode_enh->params.ps_bitmap));
1168         } else if (cmd_action == GET_PS) {
1169                 psmode_enh->action = cpu_to_le16(GET_PS);
1170                 psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1171                 cmd->size = cpu_to_le16(S_DS_GEN + sizeof(psmode_enh->action) +
1172                                 sizeof(psmode_enh->params.ps_bitmap));
1173         } else if (cmd_action == EN_AUTO_PS) {
1174                 psmode_enh->action = cpu_to_le16(EN_AUTO_PS);
1175                 psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1176                 cmd_size = S_DS_GEN + sizeof(psmode_enh->action) +
1177                                 sizeof(psmode_enh->params.ps_bitmap);
1178                 tlv = (u8 *) cmd + cmd_size;
1179                 if (ps_bitmap & BITMAP_STA_PS) {
1180                         struct mwifiex_adapter *adapter = priv->adapter;
1181                         struct mwifiex_ie_types_ps_param *ps_tlv =
1182                                 (struct mwifiex_ie_types_ps_param *) tlv;
1183                         struct mwifiex_ps_param *ps_mode = &ps_tlv->param;
1184                         ps_tlv->header.type = cpu_to_le16(TLV_TYPE_PS_PARAM);
1185                         ps_tlv->header.len = cpu_to_le16(sizeof(*ps_tlv) -
1186                                         sizeof(struct mwifiex_ie_types_header));
1187                         cmd_size += sizeof(*ps_tlv);
1188                         tlv += sizeof(*ps_tlv);
1189                         dev_dbg(adapter->dev, "cmd: PS Command: Enter PS\n");
1190                         ps_mode->null_pkt_interval =
1191                                 cpu_to_le16(adapter->null_pkt_interval);
1192                         ps_mode->multiple_dtims =
1193                                 cpu_to_le16(adapter->multiple_dtim);
1194                         ps_mode->bcn_miss_timeout =
1195                                 cpu_to_le16(adapter->bcn_miss_time_out);
1196                         ps_mode->local_listen_interval =
1197                                 cpu_to_le16(adapter->local_listen_interval);
1198                         ps_mode->adhoc_wake_period =
1199                                 cpu_to_le16(adapter->adhoc_awake_period);
1200                         ps_mode->delay_to_ps =
1201                                 cpu_to_le16(adapter->delay_to_ps);
1202                         ps_mode->mode =
1203                                 cpu_to_le16(adapter->enhanced_ps_mode);
1204
1205                 }
1206                 if (ps_bitmap & BITMAP_AUTO_DS) {
1207                         struct mwifiex_ie_types_auto_ds_param *auto_ds_tlv =
1208                                 (struct mwifiex_ie_types_auto_ds_param *) tlv;
1209                         u16 idletime = 0;
1210
1211                         auto_ds_tlv->header.type =
1212                                 cpu_to_le16(TLV_TYPE_AUTO_DS_PARAM);
1213                         auto_ds_tlv->header.len =
1214                                 cpu_to_le16(sizeof(*auto_ds_tlv) -
1215                                         sizeof(struct mwifiex_ie_types_header));
1216                         cmd_size += sizeof(*auto_ds_tlv);
1217                         tlv += sizeof(*auto_ds_tlv);
1218                         if (auto_ds)
1219                                 idletime = auto_ds->idle_time;
1220                         dev_dbg(priv->adapter->dev,
1221                                         "cmd: PS Command: Enter Auto Deep Sleep\n");
1222                         auto_ds_tlv->deep_sleep_timeout = cpu_to_le16(idletime);
1223                 }
1224                 cmd->size = cpu_to_le16(cmd_size);
1225         }
1226         return 0;
1227 }
1228
1229 /*
1230  * This function handles the command response of an enhanced power mode
1231  * command.
1232  *
1233  * Handling includes changing the header fields into CPU format
1234  * and setting the current enhanced power mode in driver.
1235  */
1236 int mwifiex_ret_enh_power_mode(struct mwifiex_private *priv,
1237                                struct host_cmd_ds_command *resp,
1238                                struct mwifiex_ds_pm_cfg *pm_cfg)
1239 {
1240         struct mwifiex_adapter *adapter = priv->adapter;
1241         struct host_cmd_ds_802_11_ps_mode_enh *ps_mode =
1242                 &resp->params.psmode_enh;
1243         uint16_t action = le16_to_cpu(ps_mode->action);
1244         uint16_t ps_bitmap = le16_to_cpu(ps_mode->params.ps_bitmap);
1245         uint16_t auto_ps_bitmap =
1246                 le16_to_cpu(ps_mode->params.ps_bitmap);
1247
1248         dev_dbg(adapter->dev, "info: %s: PS_MODE cmd reply result=%#x action=%#X\n",
1249                                         __func__, resp->result, action);
1250         if (action == EN_AUTO_PS) {
1251                 if (auto_ps_bitmap & BITMAP_AUTO_DS) {
1252                         dev_dbg(adapter->dev, "cmd: Enabled auto deep sleep\n");
1253                         priv->adapter->is_deep_sleep = true;
1254                 }
1255                 if (auto_ps_bitmap & BITMAP_STA_PS) {
1256                         dev_dbg(adapter->dev, "cmd: Enabled STA power save\n");
1257                         if (adapter->sleep_period.period)
1258                                 dev_dbg(adapter->dev, "cmd: set to uapsd/pps mode\n");
1259                 }
1260         } else if (action == DIS_AUTO_PS) {
1261                 if (ps_bitmap & BITMAP_AUTO_DS) {
1262                         priv->adapter->is_deep_sleep = false;
1263                         dev_dbg(adapter->dev, "cmd: Disabled auto deep sleep\n");
1264                 }
1265                 if (ps_bitmap & BITMAP_STA_PS) {
1266                         dev_dbg(adapter->dev, "cmd: Disabled STA power save\n");
1267                         if (adapter->sleep_period.period) {
1268                                 adapter->delay_null_pkt = false;
1269                                 adapter->tx_lock_flag = false;
1270                                 adapter->pps_uapsd_mode = false;
1271                         }
1272                 }
1273         } else if (action == GET_PS) {
1274                 if (ps_bitmap & BITMAP_STA_PS)
1275                         adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_PSP;
1276                 else
1277                         adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_CAM;
1278
1279                 dev_dbg(adapter->dev, "cmd: ps_bitmap=%#x\n", ps_bitmap);
1280
1281                 if (pm_cfg) {
1282                         /* This section is for get power save mode */
1283                         if (ps_bitmap & BITMAP_STA_PS)
1284                                 pm_cfg->param.ps_mode = 1;
1285                         else
1286                                 pm_cfg->param.ps_mode = 0;
1287                 }
1288         }
1289         return 0;
1290 }
1291
1292 /*
1293  * This function prepares command to get hardware specifications.
1294  *
1295  * Preparation includes -
1296  *      - Setting command ID, action and proper size
1297  *      - Setting permanent address parameter
1298  *      - Ensuring correct endian-ness
1299  */
1300 int mwifiex_cmd_get_hw_spec(struct mwifiex_private *priv,
1301                             struct host_cmd_ds_command *cmd)
1302 {
1303         struct host_cmd_ds_get_hw_spec *hw_spec = &cmd->params.hw_spec;
1304
1305         cmd->command = cpu_to_le16(HostCmd_CMD_GET_HW_SPEC);
1306         cmd->size =
1307                 cpu_to_le16(sizeof(struct host_cmd_ds_get_hw_spec) + S_DS_GEN);
1308         memcpy(hw_spec->permanent_addr, priv->curr_addr, ETH_ALEN);
1309
1310         return 0;
1311 }
1312
1313 /*
1314  * This function handles the command response of get hardware
1315  * specifications.
1316  *
1317  * Handling includes changing the header fields into CPU format
1318  * and saving/updating the following parameters in driver -
1319  *      - Firmware capability information
1320  *      - Firmware band settings
1321  *      - Ad-hoc start band and channel
1322  *      - Ad-hoc 11n activation status
1323  *      - Firmware release number
1324  *      - Number of antennas
1325  *      - Hardware address
1326  *      - Hardware interface version
1327  *      - Firmware version
1328  *      - Region code
1329  *      - 11n capabilities
1330  *      - MCS support fields
1331  *      - MP end port
1332  */
1333 int mwifiex_ret_get_hw_spec(struct mwifiex_private *priv,
1334                             struct host_cmd_ds_command *resp)
1335 {
1336         struct host_cmd_ds_get_hw_spec *hw_spec = &resp->params.hw_spec;
1337         struct mwifiex_adapter *adapter = priv->adapter;
1338         int i;
1339
1340         adapter->fw_cap_info = le32_to_cpu(hw_spec->fw_cap_info);
1341
1342         if (IS_SUPPORT_MULTI_BANDS(adapter))
1343                 adapter->fw_bands = (u8) GET_FW_DEFAULT_BANDS(adapter);
1344         else
1345                 adapter->fw_bands = BAND_B;
1346
1347         adapter->config_bands = adapter->fw_bands;
1348
1349         if (adapter->fw_bands & BAND_A) {
1350                 if (adapter->fw_bands & BAND_GN) {
1351                         adapter->config_bands |= BAND_AN;
1352                         adapter->fw_bands |= BAND_AN;
1353                 }
1354                 if (adapter->fw_bands & BAND_AN) {
1355                         adapter->adhoc_start_band = BAND_A | BAND_AN;
1356                         adapter->adhoc_11n_enabled = true;
1357                 } else {
1358                         adapter->adhoc_start_band = BAND_A;
1359                 }
1360                 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL_A;
1361         } else if (adapter->fw_bands & BAND_GN) {
1362                 adapter->adhoc_start_band = BAND_G | BAND_B | BAND_GN;
1363                 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1364                 adapter->adhoc_11n_enabled = true;
1365         } else if (adapter->fw_bands & BAND_G) {
1366                 adapter->adhoc_start_band = BAND_G | BAND_B;
1367                 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1368         } else if (adapter->fw_bands & BAND_B) {
1369                 adapter->adhoc_start_band = BAND_B;
1370                 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1371         }
1372
1373         adapter->fw_release_number = le32_to_cpu(hw_spec->fw_release_number);
1374         adapter->number_of_antenna = le16_to_cpu(hw_spec->number_of_antenna);
1375
1376         dev_dbg(adapter->dev, "info: GET_HW_SPEC: fw_release_number- %#x\n",
1377                adapter->fw_release_number);
1378         dev_dbg(adapter->dev, "info: GET_HW_SPEC: permanent addr: %pM\n",
1379                                         hw_spec->permanent_addr);
1380         dev_dbg(adapter->dev, "info: GET_HW_SPEC: hw_if_version=%#x  version=%#x\n",
1381                 le16_to_cpu(hw_spec->hw_if_version),
1382                le16_to_cpu(hw_spec->version));
1383
1384         if (priv->curr_addr[0] == 0xff)
1385                 memmove(priv->curr_addr, hw_spec->permanent_addr, ETH_ALEN);
1386
1387         adapter->region_code = le16_to_cpu(hw_spec->region_code);
1388
1389         for (i = 0; i < MWIFIEX_MAX_REGION_CODE; i++)
1390                 /* Use the region code to search for the index */
1391                 if (adapter->region_code == region_code_index[i])
1392                         break;
1393
1394         /* If it's unidentified region code, use the default (USA) */
1395         if (i >= MWIFIEX_MAX_REGION_CODE) {
1396                 adapter->region_code = 0x10;
1397                 dev_dbg(adapter->dev, "cmd: unknown region code, use default (USA)\n");
1398         }
1399
1400         adapter->hw_dot_11n_dev_cap = le32_to_cpu(hw_spec->dot_11n_dev_cap);
1401         adapter->hw_dev_mcs_support = hw_spec->dev_mcs_support;
1402
1403         if (adapter->if_ops.update_mp_end_port)
1404                 adapter->if_ops.update_mp_end_port(adapter,
1405                                         le16_to_cpu(hw_spec->mp_end_port));
1406
1407         return 0;
1408 }